CVE-2021-34355: high-severity vulnerability in QNAP Systems Inc. Photo Station
Stored XSS Vulnerability in Photo Station
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
21Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 7.6epss 0.6%
A cross-site scripting (XSS) vulnerability has been reported to affect QNAP NAS running Photo Station. If exploited, this vulnerability allows remote attackers to inject malicious code. We have already fixed this vulnerability in the following versions of Photo Station: Photo Station 5.4.10 ( 2021/08/19 ) and later Photo Station 5.7.13 ( 2021/08/19 ) and later Photo Station 6.0.18 ( 2021/09/01 ) and later
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:L/A:N
Affected products
QNAP Systems Inc. · Photo StationRelated CVEs — QNAP Systems Inc. Photo Station
In the same product, most dangerous first.
CVE-2022-27593CRITICALDeadBolt RansomwareEPSS 87.9%KEVCVE-2023-47562HIGHPhoto StationEPSS 1.1%CVE-2020-2491—Cross-site Scripting Vulnerability in Photo StationEPSS 1.0%CVE-2021-44057HIGHImproper authentication in Photo StationEPSS 0.9%CVE-2018-19956—CVE-2018-19956EPSS 0.9%CVE-2018-19955—CVE-2018-19955EPSS 0.9%